@poe-platform/safe-js 0.1.305 → 0.1.307

package/dist/safe-js/chunks/{chunk-JIC2DHRN.js → chunk-V6LQP64H.js}

@@ -7013,42 +7013,6 @@ function serializedDateTime(value) {
 // packages/safe-js/src/interp/internal-symbols.ts
 var internalSymbols = /* @__PURE__ */ new Set();
 
-// packages/safe-js/src/interp/generator-properties.ts
-var generatorGuestProperties = /* @__PURE__ */ new WeakMap();
-function getGeneratorProperties(value) {
-  let properties = generatorGuestProperties.get(value);
-  if (properties === void 0) {
-    properties = /* @__PURE__ */ Object.create(null);
-    generatorGuestProperties.set(value, properties);
-  }
-  return properties;
-}
-
-// packages/safe-js/src/interp/regexp-properties.ts
-var regexGuestProperties = /* @__PURE__ */ new WeakMap();
-function getRegexProperties(value) {
-  const properties = regexGuestProperties.get(value);
-  if (properties === void 0) throw new TypeError("Invalid sandbox RegExp storage.");
-  return properties;
-}
-
-// packages/safe-js/src/interp/collection-properties.ts
-var collectionGuestProperties = /* @__PURE__ */ new WeakMap();
-function getCollectionProperties(value) {
-  const properties = collectionGuestProperties.get(value);
-  if (properties === void 0) throw new TypeError("Invalid sandbox collection storage.");
-  return properties;
-}
-function copyCollectionProperties(source, target, encode) {
-  const properties = collectionGuestProperties.get(source) ?? source;
-  for (const key of Reflect.ownKeys(properties)) {
-    const descriptor = Object.getOwnPropertyDescriptor(properties, key);
-    if (!("value" in descriptor)) throw new TypeError("Collection accessor properties cannot be copied as data.");
-    Object.defineProperty(target, key, { ...descriptor, value: encode(descriptor.value) });
-  }
-  if (!Object.isExtensible(properties)) Object.preventExtensions(target);
-}
-
 // packages/safe-js/src/interp/accessors.ts
 var accessorClosures = /* @__PURE__ */ new WeakMap();
 var getterAdapters = /* @__PURE__ */ new WeakMap();
@@ -7107,6 +7071,110 @@ function writePropertyDescriptor(descriptor, receiver, value, context) {
   return context.invokeClosure(setter, [value], receiver).then(() => void 0);
 }
 
+// packages/safe-js/src/interp/symbols.ts
+var wellKnownSymbols = Object.freeze({
+  iterator: Symbol.iterator,
+  asyncIterator: Symbol.asyncIterator,
+  hasInstance: Symbol.hasInstance,
+  isConcatSpreadable: Symbol.isConcatSpreadable,
+  match: Symbol.match,
+  matchAll: Symbol.matchAll,
+  replace: Symbol.replace,
+  search: Symbol.search,
+  species: Symbol.species,
+  split: Symbol.split,
+  toPrimitive: Symbol.toPrimitive,
+  toStringTag: Symbol.toStringTag,
+  unscopables: Symbol.unscopables
+});
+
+// packages/safe-js/src/interp/intrinsics.ts
+var identities = /* @__PURE__ */ new WeakMap();
+var realms2 = /* @__PURE__ */ new WeakMap();
+function registerBuiltinIdentities(budget, bindings) {
+  let realm = realms2.get(budget);
+  if (realm === void 0) realms2.set(budget, realm = /* @__PURE__ */ new Map());
+  const pending = Object.entries(bindings).map(([name, value]) => [[name], value]);
+  const visited = /* @__PURE__ */ new WeakSet();
+  for (let index = 0; index < pending.length; index++) {
+    const [path, value] = pending[index];
+    if (value === null || typeof value !== "object") continue;
+    const id = JSON.stringify(path);
+    const previous = realm.get(id);
+    if (previous !== void 0 && previous !== value)
+      throw new TypeError(`Duplicate intrinsic identity: ${id}`);
+    realm.set(id, value);
+    if (!identities.has(value)) identities.set(value, id);
+    if (visited.has(value)) continue;
+    visited.add(value);
+    const owner = isSandboxClosure(value) ? value.properties : value;
+    if (owner === void 0) continue;
+    for (const key of Reflect.ownKeys(owner)) {
+      if (typeof key === "symbol" && internalSymbols.has(key)) continue;
+      const descriptor = Object.getOwnPropertyDescriptor(owner, key);
+      const symbolName = typeof key === "symbol" ? Object.entries(wellKnownSymbols).find(([, symbol]) => symbol === key)?.[0] : void 0;
+      if (typeof key === "symbol" && symbolName === void 0)
+        throw new TypeError("Intrinsic symbol keys must be well-known symbols.");
+      const member = [...path, typeof key === "string" ? key : { symbol: symbolName }];
+      if ("value" in descriptor) pending.push([member, descriptor.value]);
+      for (const kind of ["get", "set"]) {
+        const closure = accessorClosure(descriptor[kind]);
+        if (closure !== void 0) pending.push([[...member, kind], closure]);
+      }
+    }
+  }
+}
+function getIntrinsicIdentity(value) {
+  return identities.get(value);
+}
+function resolveIntrinsicIdentity(budget, id) {
+  const value = realms2.get(budget)?.get(id);
+  if (value === void 0) throw new TypeError(`Unknown intrinsic identity: ${id}`);
+  return value;
+}
+function listIntrinsicIdentities(budget) {
+  return [...realms2.get(budget)?.keys() ?? []];
+}
+function releaseIntrinsicIdentities(budget) {
+  realms2.delete(budget);
+}
+
+// packages/safe-js/src/interp/generator-properties.ts
+var generatorGuestProperties = /* @__PURE__ */ new WeakMap();
+function getGeneratorProperties(value) {
+  let properties = generatorGuestProperties.get(value);
+  if (properties === void 0) {
+    properties = /* @__PURE__ */ Object.create(null);
+    generatorGuestProperties.set(value, properties);
+  }
+  return properties;
+}
+
+// packages/safe-js/src/interp/regexp-properties.ts
+var regexGuestProperties = /* @__PURE__ */ new WeakMap();
+function getRegexProperties(value) {
+  const properties = regexGuestProperties.get(value);
+  if (properties === void 0) throw new TypeError("Invalid sandbox RegExp storage.");
+  return properties;
+}
+
+// packages/safe-js/src/interp/collection-properties.ts
+var collectionGuestProperties = /* @__PURE__ */ new WeakMap();
+function getCollectionProperties(value) {
+  const properties = collectionGuestProperties.get(value);
+  if (properties === void 0) throw new TypeError("Invalid sandbox collection storage.");
+  return properties;
+}
+function copyCollectionProperties(source, target, encode) {
+  const properties = collectionGuestProperties.get(source) ?? source;
+  for (const key of Reflect.ownKeys(properties)) {
+    const descriptor = Object.getOwnPropertyDescriptor(properties, key);
+    if (!("value" in descriptor)) throw new TypeError("Collection accessor properties cannot be copied as data.");
+    Object.defineProperty(target, key, { ...descriptor, value: encode(descriptor.value) });
+  }
+  if (!Object.isExtensible(properties)) Object.preventExtensions(target);
+}
+
 // packages/safe-js/src/interp/collection-brands.ts
 var sandboxMapBrand = /* @__PURE__ */ Symbol("SandboxMap");
 var sandboxSetBrand = /* @__PURE__ */ Symbol("SandboxSet");
@@ -7450,74 +7518,6 @@ async function withRunResources(signal, execute) {
   return result;
 }
 
-// packages/safe-js/src/interp/symbols.ts
-var wellKnownSymbols = Object.freeze({
-  iterator: Symbol.iterator,
-  asyncIterator: Symbol.asyncIterator,
-  hasInstance: Symbol.hasInstance,
-  isConcatSpreadable: Symbol.isConcatSpreadable,
-  match: Symbol.match,
-  matchAll: Symbol.matchAll,
-  replace: Symbol.replace,
-  search: Symbol.search,
-  species: Symbol.species,
-  split: Symbol.split,
-  toPrimitive: Symbol.toPrimitive,
-  toStringTag: Symbol.toStringTag,
-  unscopables: Symbol.unscopables
-});
-
-// packages/safe-js/src/interp/intrinsics.ts
-var identities = /* @__PURE__ */ new WeakMap();
-var realms2 = /* @__PURE__ */ new WeakMap();
-function registerBuiltinIdentities(budget, bindings) {
-  let realm = realms2.get(budget);
-  if (realm === void 0) realms2.set(budget, realm = /* @__PURE__ */ new Map());
-  const pending = Object.entries(bindings).map(([name, value]) => [[name], value]);
-  const visited = /* @__PURE__ */ new WeakSet();
-  for (let index = 0; index < pending.length; index++) {
-    const [path, value] = pending[index];
-    if (value === null || typeof value !== "object") continue;
-    const id = JSON.stringify(path);
-    const previous = realm.get(id);
-    if (previous !== void 0 && previous !== value)
-      throw new TypeError(`Duplicate intrinsic identity: ${id}`);
-    realm.set(id, value);
-    if (!identities.has(value)) identities.set(value, id);
-    if (visited.has(value)) continue;
-    visited.add(value);
-    const owner = isSandboxClosure(value) ? value.properties : value;
-    if (owner === void 0) continue;
-    for (const key of Reflect.ownKeys(owner)) {
-      if (typeof key === "symbol" && internalSymbols.has(key)) continue;
-      const descriptor = Object.getOwnPropertyDescriptor(owner, key);
-      const symbolName = typeof key === "symbol" ? Object.entries(wellKnownSymbols).find(([, symbol]) => symbol === key)?.[0] : void 0;
-      if (typeof key === "symbol" && symbolName === void 0)
-        throw new TypeError("Intrinsic symbol keys must be well-known symbols.");
-      const member = [...path, typeof key === "string" ? key : { symbol: symbolName }];
-      if ("value" in descriptor) pending.push([member, descriptor.value]);
-      for (const kind of ["get", "set"]) {
-        const closure = accessorClosure(descriptor[kind]);
-        if (closure !== void 0) pending.push([[...member, kind], closure]);
-      }
-    }
-  }
-}
-function getIntrinsicIdentity(value) {
-  return identities.get(value);
-}
-function resolveIntrinsicIdentity(budget, id) {
-  const value = realms2.get(budget)?.get(id);
-  if (value === void 0) throw new TypeError(`Unknown intrinsic identity: ${id}`);
-  return value;
-}
-function listIntrinsicIdentities(budget) {
-  return [...realms2.get(budget)?.keys() ?? []];
-}
-function releaseIntrinsicIdentities(budget) {
-  realms2.delete(budget);
-}
-
 // packages/safe-js/src/interp/host-capabilities.ts
 import { types as types4 } from "node:util";
 var MAX_INDEXED_LENGTH = 65536;
@@ -7862,6 +7862,9 @@ function namedKeys(state) {
   });
 }
 
+// packages/safe-js/src/interp/error-prototypes.ts
+var errorPrototypes = /* @__PURE__ */ new WeakMap();
+
 // packages/safe-js/src/interp/object-model.ts
 var guestClosures = /* @__PURE__ */ new WeakSet();
 var functionProperties = /* @__PURE__ */ new WeakMap();
@@ -8086,11 +8089,17 @@ function releaseObjectPrototype(budget) {
   arrayPrototypes.delete(budget);
   functionPrototypes.delete(budget);
   generatorPrototypes.delete(budget);
+  errorPrototypes.delete(budget);
   initialRegexDescriptors.delete(budget);
   intrinsicPrototypes.delete(budget);
 }
 function getSandboxPrototype(value, budget) {
   if (prototypes.has(value)) return prototypes.get(value) ?? null;
+  const errorType = sandboxErrorTypes.get(value);
+  if (budget !== void 0 && errorType !== void 0) {
+    const prototype = errorPrototypes.get(budget)?.get(errorType);
+    if (prototype !== void 0) return prototype;
+  }
   if (budget !== void 0 && isGuestClosure(value) && runResources.getStore()?.functionSourceText !== false)
     return functionPrototypes.get(budget) ?? null;
   if (budget !== void 0 && Array.isArray(value)) return arrayPrototypes.get(budget) ?? null;
@@ -14474,74 +14483,6 @@ async function callSetMethod(target, methodName, args, options, stack = []) {
   }
 }
 
-// packages/safe-js/src/interp/globals/error.ts
-var errorConstructorNames = /* @__PURE__ */ new WeakMap();
-var errorNames = [
-  "Error",
-  "TypeError",
-  "RangeError",
-  "ReferenceError",
-  "SyntaxError",
-  "URIError",
-  "EvalError",
-  "AggregateError"
-];
-function createErrorGlobals(options) {
-  return Object.fromEntries(
-    errorNames.map((name) => [name, createErrorConstructor(name, options.budget)])
-  );
-}
-function isSandboxErrorConstructorInstance2(value, constructor) {
-  if (!isSandboxClosure(constructor)) {
-    throw new TypeError("Right-hand side of 'instanceof' is not a function.");
-  }
-  const name = errorConstructorNames.get(constructor);
-  if (name === void 0) {
-    return false;
-  }
-  return isSandboxErrorConstructorInstance(value, name);
-}
-function createErrorConstructor(name, budget) {
-  const call = (args, context) => createSubsetError(name, args, context?.stack ?? [], budget);
-  const closure = createSandboxClosure({ sandbox: true, call, construct: call, name });
-  errorConstructorNames.set(closure, name);
-  return closure;
-}
-function createSubsetError(name, args, stackFrames, budget) {
-  const message = name === "AggregateError" ? args[1] : args[0];
-  const options = name === "AggregateError" ? args[2] : args[1];
-  const error = createSubsetErrorValue(name, message, stackFrames, budget);
-  if (name === "AggregateError") {
-    const errors = Array.isArray(args[0]) ? [...args[0]] : [];
-    budget.allocateArrayLength(errors.length);
-    error.errors = errors;
-  }
-  if (isObjectLike(options) && Object.prototype.hasOwnProperty.call(options, "cause")) {
-    error.cause = options.cause;
-  }
-  return error;
-}
-function isObjectLike(value) {
-  return typeof value === "object" && value !== null;
-}
-
-// packages/safe-js/src/interp/methods/collection-iterator.ts
-function getCollectionIteratorMember(target, property, budget) {
-  if (Object.hasOwn(target, property)) return target[property];
-  if (property !== "next") return void 0;
-  const { collectionKind } = collectionIteratorState(target);
-  return createSandboxClosure({
-    sandbox: true,
-    name: "next",
-    call: (_args, context) => {
-      const receiver = context?.thisValue;
-      if (!isSandboxCollectionIterator(receiver) || collectionIteratorState(receiver).collectionKind !== collectionKind)
-        throw new TypeError("Iterator next requires a matching collection iterator receiver.");
-      return nextCollectionIterator(receiver, budget);
-    }
-  });
-}
-
 // packages/safe-js/src/interp/globals/float32array.ts
 var constructors = /* @__PURE__ */ new WeakSet();
 function createFloat32ArrayGlobal(budget) {
@@ -14667,6 +14608,207 @@ function relativeIndex(value, length, fallback) {
   return integer2 < 0 ? Math.max(length + integer2, 0) : Math.min(integer2, length);
 }
 
+// packages/safe-js/src/interp/globals/error.ts
+var errorConstructorNames = /* @__PURE__ */ new WeakMap();
+var errorNames = [
+  "Error",
+  "TypeError",
+  "RangeError",
+  "ReferenceError",
+  "SyntaxError",
+  "URIError",
+  "EvalError",
+  "AggregateError"
+];
+function createErrorGlobals(options) {
+  return Object.fromEntries(
+    errorNames.map((name) => [name, createErrorConstructor(name, options.budget, options.errorPrototypes === true)])
+  );
+}
+function isSandboxErrorConstructorInstance2(value, constructor) {
+  if (!isSandboxClosure(constructor)) {
+    throw new TypeError("Right-hand side of 'instanceof' is not a function.");
+  }
+  const name = errorConstructorNames.get(constructor);
+  if (name === void 0) {
+    return false;
+  }
+  return isSandboxErrorConstructorInstance(value, name);
+}
+function createErrorConstructor(name, budget, guest) {
+  const call = (args, context) => errorPrototypes.has(budget) ? createNativeError(name, args, budget, context, closure) : createSubsetError(name, args, context?.stack ?? [], budget);
+  const closure = createSandboxClosure({ guest, sandbox: true, call, construct: call, name, length: name === "AggregateError" ? 2 : 1 });
+  errorConstructorNames.set(closure, name);
+  return closure;
+}
+function createErrorPrototypes(budget, constructors2) {
+  const prototypes2 = /* @__PURE__ */ new Map();
+  for (const name of errorNames) prototypes2.set(name, /* @__PURE__ */ Object.create(null));
+  errorPrototypes.set(budget, prototypes2);
+  for (const name of errorNames) {
+    const constructor = constructors2[name];
+    const prototype = prototypes2.get(name);
+    Object.defineProperties(prototype, {
+      name: { value: name, writable: true, configurable: true },
+      message: { value: "", writable: true, configurable: true },
+      constructor: { value: constructor, writable: true, configurable: true }
+    });
+    Object.defineProperty(materializeFunctionProperties(constructor), "prototype", { value: prototype, writable: false });
+    setSandboxPrototype(prototype, name === "Error" ? getSandboxPrototype(/* @__PURE__ */ Object.create(null), budget) : prototypes2.get("Error"));
+    if (name !== "Error") setSandboxPrototype(constructor, constructors2.Error);
+  }
+  Object.defineProperty(prototypes2.get("Error"), "toString", {
+    writable: true,
+    configurable: true,
+    value: createSandboxClosure({
+      guest: true,
+      sandbox: true,
+      name: "toString",
+      length: 0,
+      call: async (_args, context) => {
+        const receiver = context?.thisValue;
+        if (receiver === null || typeof receiver !== "object") throw new TypeError("Error.prototype.toString requires an object.");
+        let name;
+        const release = retainValues(budget, () => [receiver, name]);
+        try {
+          const rawName = await readErrorProperty(receiver, "name", budget, context);
+          name = rawName === void 0 ? "Error" : await sandboxString(rawName, budget, context);
+          const rawMessage = await readErrorProperty(receiver, "message", budget, context);
+          const message = rawMessage === void 0 ? "" : await sandboxString(rawMessage, budget, context);
+          return budget.allocateString(name === "" ? message : message === "" ? name : `${name}: ${message}`);
+        } finally {
+          release();
+        }
+      }
+    })
+  });
+  registerBuiltinIdentities(budget, Object.fromEntries(errorNames.map((name) => [name, constructors2[name]])));
+  for (const name of errorNames) {
+    registerIntrinsicFunction(budget, constructors2[name]);
+    registerIntrinsicObject(budget, prototypes2.get(name));
+  }
+}
+async function readErrorProperty(value, key, budget, context) {
+  if (context?.getProperty !== void 0) return context.getProperty(value, key);
+  const descriptor = getSandboxPropertyDescriptor(value, key, budget);
+  return descriptor === void 0 ? void 0 : readPropertyDescriptor(descriptor, value, context);
+}
+async function createNativeError(name, args, budget, context, constructor) {
+  const newTarget = context?.newTarget ?? constructor;
+  const candidate = await readErrorProperty(newTarget, "prototype", budget, context);
+  const prototype = candidate !== null && typeof candidate === "object" ? candidate : errorPrototypes.get(budget).get(name);
+  let error;
+  let iterator;
+  const errors = [];
+  const release = retainValues(budget, () => [prototype, error, iterator?.retainedValue, ...errors, ...args]);
+  try {
+    const message = name === "AggregateError" ? args[1] : args[0];
+    const options = name === "AggregateError" ? args[2] : args[1];
+    const text = message === void 0 ? void 0 : await sandboxString(message, budget, context);
+    error = createSubsetErrorValue(name, text, context?.stack ?? [], budget);
+    setSandboxPrototype(error, prototype, budget);
+    if (options !== null && typeof options === "object" && getSandboxPropertyDescriptor(options, "cause", budget) !== void 0) {
+      const cause = await readErrorProperty(options, "cause", budget, context);
+      Object.defineProperty(error, "cause", { value: cause, writable: true, configurable: true });
+    }
+    if (name === "AggregateError") {
+      iterator = context === void 0 ? getSandboxIterator(args[0], budget) : await acquireSandboxIterator(args[0], budget, context);
+      if (iterator === void 0) throw new TypeError("AggregateError errors must be iterable.");
+      while (true) {
+        budget.visitNode();
+        const result = await iterator.next();
+        if (result === null || typeof result !== "object") throw new TypeError("Iterator result must be an object.");
+        if ((await readIteratorResult(iterator, result, "done")).value) break;
+        budget.allocateArrayLength(errors.length + 1);
+        errors.push((await readIteratorResult(iterator, result, "value")).value);
+      }
+      Object.defineProperty(error, "errors", { value: errors, writable: true, configurable: true });
+    }
+    return error;
+  } finally {
+    release();
+  }
+}
+function createSubsetError(name, args, stackFrames, budget) {
+  const message = name === "AggregateError" ? args[1] : args[0];
+  const options = name === "AggregateError" ? args[2] : args[1];
+  const error = createSubsetErrorValue(name, message, stackFrames, budget);
+  if (name === "AggregateError") {
+    const errors = Array.isArray(args[0]) ? [...args[0]] : [];
+    budget.allocateArrayLength(errors.length);
+    error.errors = errors;
+  }
+  if (isObjectLike(options) && Object.prototype.hasOwnProperty.call(options, "cause")) {
+    error.cause = options.cause;
+  }
+  return error;
+}
+function isObjectLike(value) {
+  return typeof value === "object" && value !== null;
+}
+
+// packages/safe-js/src/interp/instanceof.ts
+async function evaluateInstanceof(value, constructor, budget, context) {
+  if (constructor === null || typeof constructor !== "object")
+    throw new TypeError("Right-hand side of 'instanceof' must be an object.");
+  const method = await readInstanceProperty(constructor, Symbol.hasInstance, budget, context);
+  if (method !== void 0 && method !== null) {
+    if (!isSandboxClosure(method)) throw new TypeError("Symbol.hasInstance must be callable.");
+    return Boolean(await invokeBuiltinClosure(method, [value], budget, context, constructor));
+  }
+  if (!isSandboxClosure(constructor))
+    throw new TypeError("Right-hand side of 'instanceof' is not a function.");
+  return ordinaryHasInstance(value, constructor, budget, context);
+}
+async function ordinaryHasInstance(value, constructor, budget, context) {
+  if (!isSandboxClosure(constructor)) return false;
+  if (constructor.boundTarget !== void 0) {
+    budget.visitNode();
+    return evaluateInstanceof(value, constructor.boundTarget, budget, context);
+  }
+  if (isFloat32ArrayConstructor(constructor)) return isFloat32Array(value);
+  if ((!isGuestClosure(constructor) || value !== null && typeof value === "object" && !hasExplicitSandboxPrototype(value)) && isSandboxErrorConstructorInstance2(value, constructor)) return true;
+  if (!isGuestClosure(constructor) || typeof value !== "object" || value === null) return false;
+  const prototype = await readInstanceProperty(constructor, "prototype", budget, context);
+  if (typeof prototype !== "object" || prototype === null)
+    throw new TypeError("Function has a non-object prototype in instanceof check.");
+  let depth = 0;
+  for (let current = getSandboxPrototype(value, budget); current !== null; current = getSandboxPrototype(current, budget)) {
+    budget.visitNode();
+    assertSandboxDataDepth(depth++);
+    if (current === prototype) return true;
+  }
+  return false;
+}
+async function readInstanceProperty(value, key, budget, context) {
+  if (context?.getProperty !== void 0) return context.getProperty(value, key);
+  const descriptor = getSandboxPropertyDescriptor(value, key, budget);
+  if (descriptor === void 0) return void 0;
+  return readPropertyDescriptor(descriptor, value, {
+    ...context,
+    stack: context?.stack ?? [],
+    thisValue: value,
+    invokeClosure: context?.invokeClosure ?? ((closure, args, receiver) => invokeBuiltinClosure(closure, args, budget, context, receiver))
+  });
+}
+
+// packages/safe-js/src/interp/methods/collection-iterator.ts
+function getCollectionIteratorMember(target, property, budget) {
+  if (Object.hasOwn(target, property)) return target[property];
+  if (property !== "next") return void 0;
+  const { collectionKind } = collectionIteratorState(target);
+  return createSandboxClosure({
+    sandbox: true,
+    name: "next",
+    call: (_args, context) => {
+      const receiver = context?.thisValue;
+      if (!isSandboxCollectionIterator(receiver) || collectionIteratorState(receiver).collectionKind !== collectionKind)
+        throw new TypeError("Iterator next requires a matching collection iterator receiver.");
+      return nextCollectionIterator(receiver, budget);
+    }
+  });
+}
+
 // packages/safe-js/src/interp/scope.ts
 var uninitialized = /* @__PURE__ */ Symbol("uninitialized");
 var Scope = class _Scope {
@@ -17531,42 +17673,11 @@ function applyBinaryOperator(node, left, right, context) {
     case ">>>":
       return toNumber(left) >>> toNumber(right);
     case "instanceof":
-      return evaluateInstanceof(left, right, context);
+      return evaluateInstanceof(left, right, context.budget, createCoercionContext(context));
     case "in":
       return hasSandboxProperty(right, left, context);
   }
 }
-async function evaluateInstanceof(left, right, context) {
-  while (true) {
-    if (right === null || typeof right !== "object" && typeof right !== "function")
-      throw new TypeError("Right-hand side of 'instanceof' must be an object.");
-    const method = await getPropertyValue(right, Symbol.hasInstance, context);
-    if (method !== void 0 && method !== null) {
-      if (!isSandboxClosure(method)) throw new TypeError("Symbol.hasInstance must be callable.");
-      return Boolean(await invokeSandboxClosure(method, [left], context, context.callStack, void 0, right));
-    }
-    if (!isSandboxClosure(right))
-      throw new TypeError("Right-hand side of 'instanceof' is not a function.");
-    if (right.boundTarget === void 0) break;
-    context.budget.visitNode();
-    right = right.boundTarget;
-  }
-  if (isFloat32ArrayConstructor(right)) return isFloat32Array(left);
-  if (isSandboxErrorConstructorInstance2(left, right)) return true;
-  if (isGuestClosure(right)) {
-    if (typeof left !== "object" || left === null) return false;
-    const prototype = await getPropertyValue(right, "prototype", context);
-    if (typeof prototype !== "object" || prototype === null)
-      throw new TypeError("Function has a non-object prototype in instanceof check.");
-    let depth = 0;
-    for (let current = getSandboxPrototype(left, context.budget); current !== null; current = getSandboxPrototype(current, context.budget)) {
-      context.budget.visitNode();
-      assertSandboxDataDepth(depth++);
-      if (current === prototype) return true;
-    }
-  }
-  return false;
-}
 function createCoercionContext(context) {
   return {
     stack: context.callStack,
@@ -18855,11 +18966,10 @@ function surfaceThrownValue(reason, budget, stackFrames = [], span) {
     throw reason;
   }
   if (isSubsetErrorValue(reason)) {
-    normalizeSurfacedSubsetError(reason, budget, stackFrames, span);
-    return reason;
+    return normalizeSurfacedSubsetError(reason, budget, stackFrames, span);
   }
   if (reason instanceof Error) {
-    const error = createSubsetErrorValue(
+    const error2 = createSubsetErrorValue(
       reason.name || "Error",
       reason.message,
       stackFrames,
@@ -18870,11 +18980,10 @@ function surfaceThrownValue(reason, budget, stackFrames = [], span) {
         span
       }
     );
-    normalizeSurfacedSubsetError(error, budget, stackFrames, span);
-    return error;
+    return normalizeSurfacedSubsetError(error2, budget, stackFrames, span);
   }
   if (isErrorLikeValue(reason)) {
-    const error = createSubsetErrorValue(
+    const error2 = createSubsetErrorValue(
       reason.name || "Error",
       reason.message,
       stackFrames,
@@ -18885,13 +18994,13 @@ function surfaceThrownValue(reason, budget, stackFrames = [], span) {
         span
       }
     );
-    normalizeSurfacedSubsetError(error, budget, stackFrames, span);
-    return error;
+    return normalizeSurfacedSubsetError(error2, budget, stackFrames, span);
   }
-  return createSubsetErrorValue("Error", describeThrownValue(reason), stackFrames, budget, {
+  const error = createSubsetErrorValue("Error", describeThrownValue(reason), stackFrames, budget, {
     chargeBudget: false,
     span
   });
+  return normalizeSurfacedSubsetError(error, budget, stackFrames, span);
 }
 function createSubsetErrorValue(name, message, stackFrames, budget, options = {}) {
   const resumeChecks = options.chargeBudget === false ? budget.suspendChecks() : void 0;
@@ -18900,11 +19009,15 @@ function createSubsetErrorValue(name, message, stackFrames, budget, options = {}
     const errorMessage = budget.allocateString(coerceErrorMessage(message));
     const header = errorMessage === "" ? errorName : `${errorName}: ${errorMessage}`;
     const stack = budget.allocateString([header, ...[...stackFrames].reverse()].join("\n"));
-    const error = {
-      name: errorName,
-      message: errorMessage,
-      stack
-    };
+    const prototype = options.transport ? void 0 : errorPrototypes.get(budget)?.get(toSandboxErrorName(errorName));
+    const error = prototype === void 0 ? { name: errorName, message: errorMessage, stack } : {};
+    if (prototype !== void 0) {
+      if (message !== void 0) Object.defineProperty(error, "message", { value: errorMessage, writable: true, configurable: true });
+      if (!errorPrototypes.get(budget).has(errorName))
+        Object.defineProperty(error, "name", { value: errorName, writable: true, configurable: true });
+      Object.defineProperty(error, "stack", { value: stack, writable: true, configurable: true });
+      setSandboxPrototype(error, prototype, budget);
+    }
     sandboxErrorTypes.set(error, toSandboxErrorName(errorName));
     attachErrorSpan(error, options.span);
     attachWrappedErrorCause(error, options.cause);
@@ -18925,6 +19038,7 @@ function isSubsetErrorValue(value) {
   if (typeof value !== "object" || value === null) {
     return false;
   }
+  if (sandboxErrorTypes.has(value)) return true;
   const prototype = Object.getPrototypeOf(value);
   return (prototype === Object.prototype || prototype === null) && typeof value.name === "string" && typeof value.message === "string" && typeof value.stack === "string";
 }
@@ -18934,21 +19048,37 @@ function normalizeSurfacedSubsetError(error, budget, stackFrames, span) {
     const name = budget.allocateString(toSandboxErrorName(readErrorName(error)));
     const message = budget.allocateString(readSurfacedErrorMessage(error, name));
     const frames = readSandboxStackFrames(error.stack);
+    if (!Object.isExtensible(error) || ["name", "message", "stack"].some((key) => {
+      const descriptor = Object.getOwnPropertyDescriptor(error, key);
+      return descriptor !== void 0 && (!("value" in descriptor) || !descriptor.writable);
+    })) {
+      const original = error;
+      const descriptors2 = Object.getOwnPropertyDescriptors(original);
+      delete descriptors2.name;
+      delete descriptors2.message;
+      delete descriptors2.stack;
+      error = Object.defineProperties({}, descriptors2);
+      const errorType = sandboxErrorTypes.get(original);
+      if (errorType !== void 0) sandboxErrorTypes.set(error, errorType);
+    }
     error.name = name;
     error.message = message;
     error.stack = budget.allocateString(
       formatErrorStack(name, message, frames.length > 0 ? frames : [...stackFrames].reverse())
     );
     attachErrorSpan(error, readErrorSpan(error) ?? span);
+    return error;
   } finally {
     resumeChecks();
   }
 }
 function readErrorName(error) {
-  return typeof error.name === "string" && error.name.length > 0 ? error.name : "Error";
+  const name = getSandboxDataProperty(error, "name");
+  return typeof name === "string" && name.length > 0 ? name : sandboxErrorTypes.get(error) ?? "Error";
 }
 function readSurfacedErrorMessage(error, name) {
-  const message = typeof error.message === "string" ? error.message : "";
+  const value = getSandboxDataProperty(error, "message");
+  const message = typeof value === "string" ? value : "";
   if (message === "") {
     return `${name} thrown`;
   }
@@ -20458,8 +20588,14 @@ function captureGuestHeapNode(value, encode) {
     }
     if (isLiveCapability(value) || isSandboxClosure(value) || isSandboxBox(value) || isSandboxDate(value) || isSandboxRegex(value) || isSandboxMap(value) || isSandboxSet(value) || isSandboxPromise(value) || isSandboxGenerator(value) || isSandboxArguments(value) || isSandboxCollectionIterator(value) || isSandboxRegExpIterator(value)) return void 0;
     const prototype = Object.getPrototypeOf(value);
-    if ((prototype === null || prototype === Object.prototype) && hasGuestObjectState(value))
-      return { kind: "guest-object", state: captureObjectState(value, encode) };
+    if ((prototype === null || prototype === Object.prototype) && hasGuestObjectState(value)) {
+      const errorType = sandboxErrorTypes.get(value);
+      return {
+        kind: "guest-object",
+        state: captureObjectState(value, encode),
+        ...errorType === void 0 ? {} : { errorType }
+      };
+    }
     return void 0;
   }
   if (origin.node.nodeId === void 0) throw new TypeError("Guest closures require an AST node identity.");
@@ -22051,9 +22187,11 @@ function createHostErrorValue(reason, stackFrames, budget, span, state = { seen:
   }
   const error = reason instanceof Error ? createSubsetErrorValue(reason.name, reason.message, stackFrames, budget, {
     cause: reason,
-    chargeBudget
+    chargeBudget,
+    transport: true
   }) : createSubsetErrorValue("Error", describeThrownReason(reason), stackFrames, budget, {
-    chargeBudget: false
+    chargeBudget: false,
+    transport: true
   });
   if (reason instanceof Error) {
     state.seen.set(reason, error);
@@ -24069,7 +24207,7 @@ function createUriGlobals(budget) {
 }
 
 // packages/safe-js/src/interp/globals/function.ts
-function createFunctionPrototype(budget) {
+function createFunctionPrototype(budget, installHasInstance = true) {
   const prototype = createSandboxClosure({ guest: true, sandbox: true, name: "", length: 0, call: () => void 0 });
   const properties = materializeFunctionProperties(prototype);
   Object.defineProperty(properties, "constructor", { value: void 0, writable: true, configurable: true });
@@ -24089,8 +24227,17 @@ function createFunctionPrototype(budget) {
       })
     });
   }
+  const hasInstance = installHasInstance ? createSandboxClosure({
+    guest: true,
+    sandbox: true,
+    name: "[Symbol.hasInstance]",
+    length: 1,
+    call: ([value], context) => ordinaryHasInstance(value, context?.thisValue, budget, context)
+  }) : void 0;
+  if (hasInstance !== void 0) Object.defineProperty(properties, Symbol.hasInstance, { value: hasInstance });
   setSandboxPrototype(prototype, getSandboxPrototype(/* @__PURE__ */ Object.create(null), budget));
   installFunctionPrototype(budget, prototype);
+  if (hasInstance !== void 0) registerIntrinsicFunction(budget, hasInstance);
 }
 
 // packages/safe-js/src/interp/globals/generator.ts
@@ -24375,7 +24522,7 @@ function createBuiltinBindings(options) {
     Date: createDateGlobal(options),
     Symbol: createSymbolGlobal(options.budget),
     BigInt: createBigIntGlobal(options.budget),
-    ...createErrorGlobals(options),
+    ...createErrorGlobals({ ...options, errorPrototypes: options.errorPrototypes !== false }),
     ...createMathGlobals({ random: options.random, budget: options.budget }),
     ...createObjectArrayGlobals(options),
     ...createMiscGlobals(options),
@@ -24383,7 +24530,8 @@ function createBuiltinBindings(options) {
     ...createPromiseGlobals(options),
     ...createRegexGlobals(options)
   };
-  createFunctionPrototype(options.budget);
+  createFunctionPrototype(options.budget, options.functionHasInstance);
+  if (options.errorPrototypes !== false) createErrorPrototypes(options.budget, bindings);
   createGeneratorPrototypes(options.budget);
   registerBuiltinIdentities(options.budget, bindings);
   return bindings;
@@ -24503,7 +24651,9 @@ function validateGuestHeapNode(raw, heap, maxArrayLength = 4294967295) {
     }
     state(node.state);
   } else if (node.kind === "guest-object" || node.kind === "guest-array") {
-    fields(node, ["kind", "state"], node.kind === "guest-array" ? ["templateNodeId", "templateOwner"] : []);
+    fields(node, ["kind", "state"], node.kind === "guest-array" ? ["templateNodeId", "templateOwner"] : ["errorType"]);
+    if (Object.hasOwn(node, "errorType") && !sandboxErrorNames.includes(node.errorType))
+      throw new TypeError("Invalid guest error type.");
     if (Object.hasOwn(node, "templateOwner")) reference(node.templateOwner, ["guest-array"]);
     if (Object.hasOwn(node, "templateNodeId") && integer(node.templateNodeId) < 1)
       throw new TypeError("Invalid template source identity.");
@@ -25473,7 +25623,7 @@ function validateArrayHeap(record4, path, state) {
 }
 function validateErrorType(record4, path) {
   if (!Object.hasOwn(record4, "errorType")) return;
-  if (record4.kind !== "object" || !sandboxErrorNames.includes(record4.errorType)) {
+  if (record4.kind !== "object" && record4.kind !== "guest-object" || !sandboxErrorNames.includes(record4.errorType)) {
     fail("invalidValue", `${path}.errorType`, "invalid error metadata");
   }
 }
@@ -26470,7 +26620,7 @@ function measureSandboxData(values, options = {}) {
       const descriptor = Object.getOwnPropertyDescriptor(value, key);
       if (descriptor !== void 0) descriptors2.push([key, descriptor]);
     }
-    const includeNonEnumerable = isSandboxDate(value) || hasManagedDescriptors(value);
+    const includeNonEnumerable = isSandboxDate(value) || sandboxErrorTypes.has(value) || hasManagedDescriptors(value);
     for (const [key, descriptor] of descriptors2) {
       if (!descriptor.enumerable && !includeNonEnumerable) continue;
       usage += 1 + key.length;
@@ -26803,6 +26953,53 @@ function copyFromSandbox(value, state, path = "<root>", options, depth = 0) {
     return options.unwrapHostObject(value);
   }
   if (nodeTypes.isProxy(value)) throw new TypeError("Unsupported proxy sandbox value.");
+  if (sandboxErrorTypes.has(value) && hasExplicitSandboxPrototype(value)) {
+    const prototype = getSandboxPrototype(value);
+    let nativePrototype = null;
+    if (prototype !== null) {
+      const identity = getIntrinsicIdentity(prototype);
+      const nativePrototypes = {
+        Error: Error.prototype,
+        TypeError: TypeError.prototype,
+        RangeError: RangeError.prototype,
+        ReferenceError: ReferenceError.prototype,
+        SyntaxError: SyntaxError.prototype,
+        URIError: URIError.prototype,
+        EvalError: EvalError.prototype,
+        AggregateError: AggregateError.prototype
+      };
+      const path2 = identity === void 0 ? [] : JSON.parse(identity);
+      if (path2.length !== 2 || typeof path2[0] !== "string" || path2[1] !== "prototype" || !Object.hasOwn(nativePrototypes, path2[0]))
+        throw new TypeError("Custom Error prototype links cannot be copied as data.");
+      nativePrototype = nativePrototypes[path2[0]];
+      let current = prototype;
+      let prototypeDepth = 0;
+      while (current !== null) {
+        assertSandboxDataDepth(++prototypeDepth);
+        const objectPrototype = getIntrinsicIdentity(current) === '["Object","prototype"]';
+        const owner = objectPrototype ? Object.getOwnPropertyDescriptor(current, "constructor")?.value : current;
+        if (owner === null || typeof owner !== "object" || objectPrototype && getIntrinsicIdentity(owner) !== '["Object"]' || hasGuestObjectState(owner))
+          throw new TypeError("Modified Error prototype links cannot be copied as data.");
+        current = getSandboxPrototype(current);
+      }
+    }
+    const existing = state.seen.get(value);
+    if (existing !== void 0) return existing;
+    const descriptors2 = Reflect.ownKeys(value).filter((key) => typeof key !== "symbol" || !internalSymbols.has(key)).map((key) => [key, Object.getOwnPropertyDescriptor(value, key)]);
+    if (descriptors2.some(([, descriptor]) => !("value" in descriptor)))
+      throw new TypeError("Error accessor properties cannot be copied as data.");
+    const copy = new Error();
+    delete copy.stack;
+    Object.setPrototypeOf(copy, nativePrototype);
+    state.seen.set(value, copy);
+    for (const [key, descriptor] of descriptors2)
+      Object.defineProperty(copy, key, {
+        ...descriptor,
+        value: copyFromSandbox(descriptor.value, state, joinPath2(path, key), options, depth + 1)
+      });
+    if (!Object.isExtensible(value)) Object.preventExtensions(copy);
+    return copy;
+  }
   if (!isSandboxClosure(value) && hasGuestObjectState(value)) {
     throw new TypeError("Guest prototype links and custom descriptors cannot be copied as data.");
   }
@@ -41251,4 +41448,4 @@ export {
   FileSnapshotBackend,
   run
 };
-//# sourceMappingURL=chunk-JIC2DHRN.js.map
+//# sourceMappingURL=chunk-V6LQP64H.js.map